THIS PAGE IS PART OF THE OZON Security Exercise. THIS MEANS THAT ANY INFORMATION PRESENTED HERE IS A TEST AND NOT A TRUE REPRESENTATION OF THE REAL WORLD.
The Netherlands IT infrastructure is currently under attack and we also are experiencing hacking attacks due to a flood of published vulnerabilities in different packages. Below we describe actions taken to mitigate the effect of these attacks and vulnerabilities on our systems.
| Date: 23 March, 2023 | |
|---|---|
| Time | Description |
| 13:15 | Openssh has a vulneraibility, we have to close all ssh access to the systems for now. Please use our VPN to access our systems from remote |
| 12:35 | Similar to the Dymo label printers several of our HP Printers have a firmware bug that requires us to shut them down until a firmware patch is available |
| 12:10 | Due to a new vulnerability in the owncloud server software for which a patch is not yet available, the owncloud server has been temporarily shutdown |
| 11:30 | We are sorry to inform you that due to a still unknown reason all our passwords have been taken and published on the WEB. Therefore, you need to change your password asap. |
| 10:50 | A vulnerability in several lab equipment software has been revealed. The Lab coordinators have been informed to disconnect any of the affected systems |
| 10:30 | It is better to refrain from running Teams Meetings until vulnerability is resolved. We advice you to use zoom for now |
| 10:18 | Several security vulnerabilities in MSTeams have been revealed. You are advised to not run MS Teams via Wireless network, but use the cabled network |
| 09:50 | We detached all Dymo label printers and have taken them back to the IT department to initiate firmware update process to fix a vulnerability issue |
| 09:30 | Due to a vulnerability in the security CERT key handling software it is possible that what seems to be a secure connection, for instance the green lock on a website, may not be secure. So please inspect the the website addresses. Additional warning about phishing emails, please inform us if you have any trouble with 2FA - in fact report any secure connection trouble |